Security


Strategies for Using Microsoft's Attack Simulation Training

Make sure your organizational phishing test doesn't fail before getting in the hands of end users.

Microsoft Adds Two New Entra Products, Renames Entra Azure Active Directory

Microsoft on Tuesday announced an expansion of its Microsoft Entra identity and access management product line, and also indicated that it is ending its Entra Azure Active Directory product name.

Speed Logo

Microsoft Scorches 132 Flaws in July's Security Patch

In a massive security update, Microsoft has released 130 new patches for July, targeting many critical vulnerabilities across its products and services, including Windows, Office, .NET, Visual Studio, Azure Active Directory, Microsoft Dynamics, and more.

Microsoft and Rubrik Partner for AI-Powered Enterprise Security Recovery

Security vendor Rubrik announced on Wednesday a team up with Microsoft to bring its Security Cloud to Microsoft Sentinel and Azure OpenAI Service.

Microsoft Advises App Developers About 'nOAuth' Attack Route

Microsoft this week addressed findings by security researchers at Descope, who reported a "nOAuth" attack route that's present in some applications leveraging the Azure Active Directory service.

Azure Firewall Gets Easier Product Upgrades and Structured Logs

Microsoft this week announced a couple of Azure Firewall improvements.

Microsoft June Security Update Targets 6 'Critical' Holes

Microsoft's monthly cumulative security update arrived on Tuesday with 69 bulletins to address vulnerabilities across the company's product and service line.

OpenAI Services Released for Government Users

Microsoft on Wednesday announced that Azure Government users now have access to the AI-based Azure OpenAI Service.

Microsoft Ordered To Pay $20M for Child Privacy Infractions

Microsoft was ordered to pay $20 million and take measures to assure child privacy under the terms of the Children's Online Privacy Protection Act (COPPA), per a Monday U.S. Federal Trade Commission (FTC) announcement.

Microsoft Discovers macOS System Vulnerability 'Migraine'

A new vulnerability in macOS, dubbed "Migraine," has been discovered by the Microsoft Threat Intelligence team.

Microsoft Outlines New Features Coming Soon to Windows 11

Microsoft this week included some Windows 11 client news amid its many Build announcements for developers, promising to soon deliver new features to Windows 11 version 22H2 users.

Microsoft 365 Defender Now Automatically Disrupts Adversary-in-the-Middle Attacks

Microsoft 365 Defender now can automatically detect and disrupt "adversary-in-the-middle" (AiTM) attacks, Microsoft announced on Wednesday.

Iffy Azure Storage Default Setting Getting Nixed in August

Microsoft gave notice on Wednesday that it will disable a default setting in Azure Storage that can permit anonymous access and cross-tenant replication.

Microsoft Releases System-Preferred Multifactor Authentication

Microsoft on Tuesday announced the commercial release ("general availability") of system-preferred multifactor authentication (MFA).

Azure Active Directory Gets 'Converged' Management for Authentication Methods

Microsoft this week announced a few Azure Active Directory improvements.

Microsoft's Secure Boot BlackLotus Patching To Extend into 2024

Microsoft this week offered guidance to address a Secure Boot vulnerability in Windows and Linux systems, but it'll likely be a long-term project for IT pros.

Active Directory's Place in the Modern Enterprise

Enterprises aren't ditching the on-premises version of Active Directory, despite Microsoft's best efforts with Azure AD.

Microsoft Patches 3 Zero Day Flaws in May Security Update

Microsoft's monthly security update arrived on Tuesday with a lighter-than-usual 38 bulletins to address flaws across the company's line of supported products and services.

Microsoft To Target Insecure Exchange Server E-Mail Connections

IT pros may face deadlines after some recent Exchange team announcements regarding Exchange Online.

Swirl

Samsung Bans Employees' Use of ChatGPT

Electronics manufacturer Samsung has communicated to employees not to use AI tools like OpenAI's ChatGPT over privacy and security concerns.

Subscribe on YouTube